Q70 — AWS SAA-C03 Ch.15

Question 70 of 100 | ← Chapter 15

Q1170. A company runs an application on Amazon EC2 instances that are behind an Application Load Balancer (ALB). The company uses Amazon Route 53 to route traffic to the ALB. The ALB is a resource in an AWS Shield Advanced protection group.The company is preparing for a blue/green deployment in which traffic will shift to a new ALB. The company wants to protect against DDoS attacks during the deployment.Which solution will meet this requirement?

• A. Add the new ALB to the Shield Advanced protection group. Select Sum as the aggregation type for the volume of traffic for the whole group. ✓
• B. Add the new ALB to the Shield Advanced protection group. Select Mean as the aggregation type for the volume of traffic for the whole group.
• C. Create a new Shield Advanced protection group.Add the new ALB to the new protection group. Select Sum as the aggregation type for the volume of traffic.
• D. Set up an Amazon CloudFront distribution. Add the CloudFront distribution and the new ALB to the Shield Advanced protection group. Select Max as the aggregation type for the volume of traffic for the whole group.

Correct Answer: A. Add the new ALB to the Shield Advanced protection group. Select Sum as the aggregation type for the volume of traffic for the whole group.

Explanation

To protect against DDoS attacks during a blue/green deployment of a new Application Load Balancer (ALB), the best solution is:A. Add the new ALB to the Shield Advanced protection group. Select Sum as the aggregation type for the volume of traffic for the whole group.### Explanation:Adding the New ALB to the Existing Protection Group: This ensures that both the existing and new ALBs are protected under the same Shield Advanced settings, providing comprehensive DDoS protection during the transition.Sum as the Aggregation Type: Selecting "Sum" as the aggregation type allows the Shield Advanced service to sum the total traffic volume across all resources in the protection group. This is important for effectively monitoring and mitigating DDoS attacks.### Other Options:B: Using "Mean" as the aggregation type may not effectively account for the total traffic volume, making it less suitable for DDoS attack detection and mitigation.C: Creating a new protection group is unnecessary if you can add the new ALB to the existing one, which simplifies management and ensures continuity of protection.D: While setting up a CloudFront distribution can help with DDoS protection, it adds complexity and is not required if the goal is solely to protect the ALB during the deployment.Thus, option A is the most effective and straightforward solution to ensure DDoS protection during the blue/ green deployment.